From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp0.migadu.com ([2001:41d0:403:58f0::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms8.migadu.com with LMTPS id 6M/7Dx/k9WUVLAEAqHPOHw:P1 (envelope-from ) for ; Sat, 16 Mar 2024 19:25:35 +0100 Received: from aspmx1.migadu.com ([2001:41d0:403:58f0::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp0.migadu.com with LMTPS id 6M/7Dx/k9WUVLAEAqHPOHw (envelope-from ) for ; Sat, 16 Mar 2024 19:25:35 +0100 X-Envelope-To: larch@yhetil.org Authentication-Results: aspmx1.migadu.com; dkim=none ("invalid DKIM record") header.d=msavoritias.me header.s=20210930 header.b=HnhSMqmr; spf=pass (aspmx1.migadu.com: domain of "guix-devel-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="guix-devel-bounces+larch=yhetil.org@gnu.org"; dmarc=fail reason="SPF not aligned (relaxed)" header.from=msavoritias.me (policy=none) ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=yhetil.org; s=key1; t=1710613535; h=from:from:sender:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:cc:mime-version:mime-version: content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references:list-id:list-help: list-unsubscribe:list-subscribe:list-post:dkim-signature; bh=ER5T+GZ66DXZRCzQioZoqE8RS644qgquaXWzDaKGD5c=; b=DH0MzVZEjvAOv8iS5q9zKxCZ0i4tFQwv8O93SCXVbe6FCDlJ9uu5nZWaUjwsZ949P3nHuN ibfifoq+2FJSGIJwSXAF6zvxNB46Qxo6LRaG975UEBEeWecXnELzod+OCGpagXbP3rarKH kWn5LEGaQpWX9vWxnqSmHdOeykLf14miWdnQbxHWU35m1n7ynMNOiKxosLb9cPhiVekTN+ 903L2TTAL/vE532Jefnv/tRzZBEEUS/CpaAGQGOnHFmVIP9RqRmOUj2D+qsRi4ae/JyFxK D8pqQazd6AarIZX59lVl32/jpA7WxmlSP5/zPo8vNmHd4MXd1m1KTiU+ShJSBA== ARC-Seal: i=1; s=key1; d=yhetil.org; t=1710613535; a=rsa-sha256; cv=none; b=I37ydy3lJfqFrrKzOQ2WQs+go2dxbUHL8sLNrXA/8mtEJLiY2sqakdZ8L8GGgE3GbHBQdB GB3axyI464BgBiVq2i+aFix3xLZ22lGoJFddbyHMlnNR+8GDq9LJr/UP+n6u9NWBWrp4O4 Q6dgABvKCL8JqhdDOpk2L7Zz83iOs5X7eluZMewOU7nWEeqz6QzAuUJph/QSDICjy2JL+b DGO0YJIqpigZUCZO9kH+TJ0s3sGoN/u1TyvZKFkRDgJv/T5TlA7gTe/4OnQiyGgw9jmqi0 5FdzA1NKN7O0mbykVT91qUj4Pj7gDoKRRkD3PslB2XQE+ztGiiRuMMIzgzhTPA== ARC-Authentication-Results: i=1; aspmx1.migadu.com; dkim=none ("invalid DKIM record") header.d=msavoritias.me header.s=20210930 header.b=HnhSMqmr; spf=pass (aspmx1.migadu.com: domain of "guix-devel-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="guix-devel-bounces+larch=yhetil.org@gnu.org"; dmarc=fail reason="SPF not aligned (relaxed)" header.from=msavoritias.me (policy=none) Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id 1F4EA6C3B2 for ; Sat, 16 Mar 2024 19:25:35 +0100 (CET) Received: from localhost ([::1] helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1rlYiM-0001KH-O7; Sat, 16 Mar 2024 14:25:02 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1rlYiL-0001Js-7V for guix-devel@gnu.org; Sat, 16 Mar 2024 14:25:01 -0400 Received: from mail.webarch.email ([81.95.52.48]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1rlYiI-0006uE-P2 for guix-devel@gnu.org; Sat, 16 Mar 2024 14:25:00 -0400 Received: from [127.0.0.1] (localhost [127.0.0.1]) by localhost (Mailerdaemon) with ESMTPSA id 7AEFD1A8C0EF; Sat, 16 Mar 2024 18:24:53 +0000 (GMT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=msavoritias.me; s=20210930; t=1710613495; h=from:subject:date:message-id:to:cc:mime-version:content-type: content-transfer-encoding:content-language:in-reply-to:references; bh=ER5T+GZ66DXZRCzQioZoqE8RS644qgquaXWzDaKGD5c=; b=HnhSMqmrhk2oX8QESObTiI4YYkZ6Wrgq2wsBOarmGXd7sRzI2v2u1sIPDZ6FXngHpwupfF V6xvfV6H8eEQIkH4FANvo2XAPkAfwSkiD0W52+ikWzPHwOull5bmSYtU7cYJXRkoL0FAZJ iRfZ0bgGsUGSv9JBYX0iyLjCA1NWqGfl8baLPUm8QlHSIC7W8DWsg0LT7Sc9dM5hTeuD94 OXrUuYVTejhqfLlOcirvdNbUxjlJvzX84Xnl0b49oGW7KsFfDEVTHE6gWeEz0NTy9ce7zu pxx04S4B+jLCwZJvShdcTPmM/B3ufzmINB9JfcIy8kWHmlL+r+4guVgKH1CUew== Message-ID: Date: Sat, 16 Mar 2024 20:24:50 +0200 MIME-Version: 1.0 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:102.0) Gecko/20100101 Thunderbird/102.15.0 Subject: Re: Concerns/questions around Software Heritage Archive Content-Language: en-US To: Christopher Baines , Ian Eure Cc: guix-devel@gnu.org References: <87il1mupco.fsf@meson> <87cyruqcfe.fsf@cbaines.net> From: MSavoritias In-Reply-To: <87cyruqcfe.fsf@cbaines.net> Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 8bit X-Last-TLS-Session-Version: TLSv1.3 Received-SPF: pass client-ip=81.95.52.48; envelope-from=email@msavoritias.me; helo=mail.webarch.email X-Spam_score_int: -31 X-Spam_score: -3.2 X-Spam_bar: --- X-Spam_report: (-3.2 / 5.0 requ) BAYES_00=-1.9, DKIM_INVALID=0.1, DKIM_SIGNED=0.1, NICE_REPLY_A=-1.462, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01 autolearn=ham autolearn_force=no X-Spam_action: no action X-BeenThere: guix-devel@gnu.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "Development of GNU Guix and the GNU System distribution." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-devel-bounces+larch=yhetil.org@gnu.org Sender: guix-devel-bounces+larch=yhetil.org@gnu.org X-Migadu-Flow: FLOW_IN X-Migadu-Country: US X-Migadu-Spam-Score: -6.20 X-Spam-Score: -6.20 X-Migadu-Queue-Id: 1F4EA6C3B2 X-Migadu-Scanner: mx11.migadu.com X-TUID: OzY72KCQjXRk On 3/16/24 19:50, Christopher Baines wrote: > Ian Eure writes: > >> Hi Guixy people, >> >> I’d never heard of SWH before I started hacking on Guix last fall, and >> it struck me as rather a good idea. However, I’ve seen some things >> lately which have soured me on them. >> >> They appear to be using the archive to build LLMs: >> https://www.softwareheritage.org/2024/02/28/responsible-ai-with-starcoder2/ >> >> I was also distressed to see how poorly they treated a developer who >> wished to update their name: >> https://cohost.org/arborelia/post/4968198-the-software-heritag >> https://cohost.org/arborelia/post/5052044-the-software-heritag >> >> GPL’d software I’ve created has been packaged for Guix, which I assume >> means it’s been included in SWH. While I’m dealing with their (IMO: >> unethical) opt-out process, I likely also need to stop new copies from >> being uploaded again in the future. >> >> Is there a way to indicate, in a Guix package, that it should *never* >> be included in SWH? > Not currently, and I don't really see the point in such a mechanism. If > you really never want them to store your code, then you need to license > it accordingly (and not make it free software). You are talking about legal tho. Yes legally they can copy the code. But what can Guix do socially to give people the choice? For reasons of consent that is. >> I was also distressed to see how poorly they treated a developer who >> wished to update their name: >> https://cohost.org/arborelia/post/4968198-the-software-heritag >> https://cohost.org/arborelia/post/5052044-the-software-heritag > This is probably worth thinking about as Guix is in a similar situation > regarding publishing source code, and people potentially wanting to > change historical source code both in things Guix packages and Guix > itself. > > Like Software Heritage, there's cryptographical implications for > rewriting the Git history and modifying source tarballs or nars that > contain source code. > > We have 17TiB of compressed source code and built software stored for > bordeaux.guix.gnu.org now and we should probably work out how to handle > people asking for things to be removed or changed (for any and all > reasons). > > It's probably worth working out our position on this in advance of > someone asking. I would go a step further actually. Software Heritage is effectively breaking CoC of Guix now. Im not proposing removing all code or something obviously that connects to Software Heritage, but there should be some social action we can take. For example until the matter is resolved and Software Heritage implements a process that respects trans rights Software Heritage should not be welcome in Guix Spaces. MSavoritias